1. Consent of the personal data subject – a voluntary expression of will of an individual (provided they are informed) regarding the permission to process their personal data in accordance with the stated purpose of their processing, expressed in written or electronic form, as provided by the Law of Ukraine “On Personal Data Protection”.

2. Informed consent to personal data processing should be understood as a voluntary, competent decision made by a person regarding the processing of their personal data, based on obtaining complete, objective, and comprehensive information about the upcoming personal data processing.

3. To make a conscious choice – to give or not to give consent to personal data processing – the person must have answers to the following questions before giving consent:

• - who will process their personal data? (name of the personal data controller, their address, contact phone numbers, etc.)
• - for what purpose will personal data be processed? (The purpose must be clearly and understandably formulated)
• - what personal data will be processed? (A specific exhaustive list of the individual's personal data that is planned to be processed)
• - what actions with personal data will their processing involve? (collection, storage, transfer, disclosure, anonymization, etc.)
• - Who is the personal data processor? What are the rights and powers of the processor regarding personal data processing?
• - To whom can personal data be transferred? For what purpose? On what grounds?
• - How long will personal data be stored by the controller?
• - Under what conditions can a person withdraw consent to personal data processing and what are the consequences of such action?
• - Other rights defined by Article 8 of the Law "On Personal Data Protection".

4. The specified information must be provided by the controller in full, in a simple and understandable form, before the personal data subject gives consent to the processing of their personal data.

5. Consent to personal data processing must be a conscious decision of the person, which they make voluntarily, without coercion and threats.

6. A person who is a personal data subject can only change their personal data themselves. In particular, only the person themselves can initiate the process of changing their name, surname, residential address, etc. No personal data controller or processor can influence a person's personal data or change them at their own discretion.

7. A person who has given consent to the processing of their personal data can monitor the process of their processing.

8. For this purpose, the person can periodically contact the controller who carries out such processing and receive the information specified in clause 3.

9. All personal data about a person processed by the controller must be accurate. In case of any inaccuracies, the person whose personal data are processed has the right to demand that appropriate changes be made to their personal data or to file a complaint with the Human Rights Commissioner or the court.

10. In addition, a person can withdraw consent to the processing of their personal data at any time. In such a case, the controller must stop processing, i.e., destroy or delete the personal data of the person who withdrew their consent.